search

pulsejet / nextcloud-oidc-login

Nextcloud login via a single OpenID Connect 1.0 provider
https://apps.nextcloud.com/apps/oidc_login
GNU Affero General Public License v3.0
219 stars 59 forks source link

OIDC Front-channel logout #246

Open enricosuardi opened 11 months ago

enricosuardi commented 11 months ago

Following #188, I tried to implement the front-channel logout flow. During login it saves the session id (sid, from access token) in NextCloud session, that will be used during the logout phase to check if the user being logged belongs to the same session.

I tested this against NC 26.0 and Keycloak 22.0 Keycloak client is configured as following:

The original issue addresses back-channel logut flow, I don't know if all OIDC providers support front-channel as well

kTakumo commented 2 days ago

How is it going with this PR? Waiting to see this feature in a new version of the plugin... Thx